Vulnerability · Published Jan 28, 2026 · Assigned by Hitachi Energy
CVE-2025-7740Use of default credentials vulnerability in Hitachi Energy SuprOS product
High 8.8
In plain English
A high-severity security flaw in SuprOS from Hitachi Energy. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 6% of all known vulnerabilities).
Severity (CVSS 4.0)8.8High
Exploit odds (30 days)0.2%top 94.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Default credentials vulnerability exists in SuprOS product. If exploited, this could allow an authenticated local attacker to use an admin account created during product deployment.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Hitachi Energy | SuprOS | 9.0.0 – through 9.2.2.0 |
Weakness: CWE-1392 · Vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H